ansible vulnerabilities (SUSE)
142 vulnerabilities.
-
ansibleSUSE Ansible-core: exposure of sensitive information in ansible vault files due to improper logging 5.5 Medium -
ansibleSUSE Users outside an organization can delete a snapshot with its key 6.5 Medium -
ansibleSUSE Email Validation Bypass And Preventing Sign Up From Email's Owner 5.4 Medium -
ansibleSUSE Ansible-core: possible information leak in tasks that ignore ansible_no_log configuration 5.0 Medium -
ansibleSUSE Ansible: template injection 7.1 High -
ansibleSUSE Grafana vulnerable to Authentication Bypass by Spoofing 9.4 Critical -
ansibleSUSE Grafana has Broken Access Control in Alert manager: Viewer can send test alerts 4.1 Medium -
ansibleSUSE Grafana Missing Synchronization vulnerability 7.5 High -
ansibleSUSE Grafana is an open-source platform for monitoring and observability. Starting with the 9.1... 4.2 Medium -
ansibleSUSE Stored XSS in Graphite FunctionDescription tooltip 6.2 Medium -
ansibleSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
ansibleSUSE Grafana vulnerable to Cross-site Scripting 7.3 High -
ansibleSUSE Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net 7.5 High -
ansibleSUSE Grafana stored XSS in FileUploader component 7.3 High -
ansibleSUSE Grafana vulnerable to spoofing originalUrl of snapshots 6.7 Medium -
ansibleSUSE Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
ansibleSUSE Grafana subject to Exposure of Sensitive Information resulting in User enumeration via forget password 6.7 Medium -
ansibleSUSE Grafana contains Improper Input Validation 6.4 Medium -
ansibleSUSE Grafana users with email as a username can block other users from signing in 4.3 Medium -
ansibleSUSE Data source and plugin proxy endpoints could leak the authentication cookie to some destination plugins 6.8 Medium -
ansibleSUSE Grafana data source and plugin proxy endpoints leaking authentication tokens to some destination plugins 4.9 Medium -
ansibleSUSE Grafana plugin signature bypass vulnerability 6.1 Medium -
ansibleSUSE Denial of service via crafted Accept-Language header in golang.org/x/text/language 7.5 High -
ansibleSUSE Memory exhaustion when compiling regular expressions in regexp/syntax 7.5 High -
ansibleSUSE Grafana folders admin only permission privilege escalation 7.6 High -
ansibleSUSE Authentication Bypass in Grafana via auth proxy allowing escalation from admin to server admin 6.6 Medium -
ansibleSUSE golang.org/x/net/http2 Denial of Service vulnerability 7.5 High -
ansibleSUSE Grafana account takeover via OAuth vulnerability 7.1 High -
ansibleSUSE Stored XSS in Grafana's Unified Alerting 7.3 High -
ansibleSUSE Grafana Enterprise datasource network restrictions bypass via HTTP redirects 6.6 Medium -
ansibleSUSE Prototype Pollution in async 7.8 High -
ansibleSUSE Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects 8.0 High -
ansibleSUSE Grafana directory traversal for `.cvs` files 4.3 Medium -
ansibleSUSE Directory Traversal in Grafana 4.3 Medium -
ansibleSUSE Grafana path traversal 7.5 High -
ansibleSUSE Cross organization admin control in Grafana 9.1 Critical -
ansibleSUSE Prototype Pollution in kriszyp/json-schema 9.8 Critical -
ansibleSUSE XSS vulnerability allowing arbitrary JavaScript execution 6.9 Medium -
ansibleSUSE Ansible discloses sensitive information in traceback error message 5.5 Medium -
ansibleSUSE Improper Input Validation and Command Injection in Ansible 7.1 High -
ansibleSUSE Inefficient Regular Expression Complexity in chalk/ansi-regex 7.5 High -
ansibleSUSE SM2 Decryption Buffer Overflow 9.8 Critical -
ansibleSUSE ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka... 7.5 High -
ansibleSUSE Arbitrary redirects under /new endpoint 6.5 Medium -
ansibleSUSE A flaw was found in several ansible modules, where parameters containing credentials, such as... 5.5 Medium -
ansibleSUSE One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7... 7.5 High -
ansibleSUSE The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x... 6.5 Medium -
ansibleSUSE The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control... 6.5 Medium -
ansibleSUSE Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor... 7.1 High -
ansibleSUSE Ansible Exposes Sensitive Information 7.5 High - Show olderLoading…